<html style="direction: ltr;">
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
<style type="text/css">body p { margin-bottom: 0cm; margin-top: 0pt; } </style>
</head>
<body style="direction: ltr;" bidimailui-charset-is-forced="true"
bgcolor="#FFFFFF" text="#000000">
Hey,<br>
<br>
Since it's a local net proxy and if the proxy is firewalled on the
network level I would run the next test(related to the output):<br>
<br>
<br>
<div class="moz-cite-prefix">On 11/04/2016 09:40, --Ahmad-- wrote:<br>
</div>
<blockquote
cite="mid:E0943D77-75E8-46AC-B061-D89502E952D5@netstream.ps"
type="cite">
<div class="" style="margin: 0px; line-height: normal;
font-family: 'Andale Mono'; color: rgb(41, 249, 20);
background-color: rgb(0, 0, 0);">2016/04/11 09:25:53|
Processing: http_access allow rdp</div>
<div class="" style="margin: 0px; line-height: normal;
font-family: 'Andale Mono'; color: rgb(41, 249, 20);
background-color: rgb(0, 0, 0);">2016/04/11 09:25:53|
Processing: dns_nameservers 8.8.8.8 10.12.0.33</div>
<div class="" style="margin: 0px; line-height: normal;
font-family: 'Andale Mono'; color: rgb(41, 249, 20);
background-color: rgb(0, 0, 0);">2016/04/11 09:25:53|
Processing: never_direct allow all</div>
<div class="" style="margin: 0px; line-height: normal;
font-family: 'Andale Mono'; color: rgb(41, 249, 20);
background-color: rgb(0, 0, 0);">2016/04/11 09:25:53|
Processing: cache_peer 10.12.0.32 parent 80 0 no-query
no-digest default</div>
<div class="" style="margin: 0px; line-height: normal;
font-family: 'Andale Mono'; color: rgb(41, 249, 20);
background-color: rgb(0, 0, 0);">2016/04/11 09:25:53|
Processing: http_access allow localnet</div>
<div class="" style="margin: 0px; line-height: normal;
font-family: 'Andale Mono'; color: rgb(41, 249, 20);
background-color: rgb(0, 0, 0);">2016/04/11 09:25:53|
Processing: http_access deny allsrc</div>
<div class="" style="margin: 0px; line-height: normal;
font-family: 'Andale Mono'; color: rgb(41, 249, 20);
background-color: rgb(0, 0, 0);">2016/04/11 09:25:53|
Initializing https proxy context</div>
</blockquote>
<br>
I would add to the first line of squid.conf for a test<br>
acl connect method CONNECT<br>
http_access allow all CONNECT<br>
http_access allow all<br>
<br>
Use "squid -kreconf" to reload the settings and it should be
allowed.<br>
If it works then you will need to just allow the CONNECT using an
acl with the RDP port.<br>
<br>
I am not sure how squid is ok with this line:<br>
<div class="" style="margin: 0px; line-height: normal; font-family:
'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0,
0, 0);">2016/04/11 09:25:53| Processing: acl rdp dat
XXXX.XX.70.0/24</div>
<br>
It should be something like "src" instead of "dat" and also you
might want to restrict using the http_access rules the CONNECT with
the destination rdp port.<br>
<br>
<a class="moz-txt-link-freetext" href="http://www.squid-cache.org/Doc/config/acl/">http://www.squid-cache.org/Doc/config/acl/</a><br>
<br>
The other option is to add the acl:<br>
acl Safe_ports port 3389 # RDP<br>
<br>
Eliezer<br>
</body>
</html>